You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@karaf.apache.org by "Jean-Baptiste Onofré (JIRA)" <ji...@apache.org> on 2014/02/24 11:01:22 UTC

[jira] [Created] (KARAF-2786) Warn user about security issue with default key and document how to change it

Jean-Baptiste Onofré created KARAF-2786:
-------------------------------------------

             Summary: Warn user about security issue with default key and document how to change it
                 Key: KARAF-2786
                 URL: https://issues.apache.org/jira/browse/KARAF-2786
             Project: Karaf
          Issue Type: Bug
          Components: karaf-documentation, karaf-security
            Reporter: Jean-Baptiste Onofré
            Assignee: Jean-Baptiste Onofré
             Fix For: 2.4.0, 3.0.1, 3.1.0, 2.3.5


Default Karaf distribution provides a self signed key used by the SSHd server.

We should warn the users that the default distribution is potentially "vulnerable" and document how to use keytool, etc to change the key.

In addition of the etc/keys.properties, we should document the etc/users.properties to change property and add a note about encryption.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)